$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: mmhO472VZBtggqcmkXL99TEOKV03axpHmZrxDcG+M48= Subject key identifier: 18:DD:1A:F1:20:89:A1:30:81:31:01:6F:6F:8C:C1:A8:AB:D3:FD:47 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 5C483A94871F0AE5C8BEF228973B80C9659BF736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 14:01:30 +0000 Manifest this update: Wed 25 Mar 2026 13:56:30 +0000 Manifest next update: Sun 29 Mar 2026 01:47:30 +0000 Files and hashes: 1: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: I6u3LxrU+y6G1bRR0I/6tnCjxg99H01pbdkNVwvdalE=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: uy1yr304rdbNyrp48Sp9BPHAsKJE9GKxgaii4AOju6s=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:48:3a:94:87:1f:0a:e5:c8:be:f2:28:97:3b:80:c9:65:9b:f7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Mar 25 13:56:30 2026 GMT Not After : Mar 29 01:47:30 2026 GMT Subject: CN=18DD1AF12089A1308131016F6F8CC1A8ABD3FD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:06:e1:26:9c:e3:5e:b8:03:48:e6:50:0c: 6a:e9:dc:d0:4a:37:fd:80:31:69:06:dd:f1:b8:52: a8:3a:90:cf:13:e4:a3:bf:3a:1e:de:c4:26:71:ee: 55:33:12:4e:9d:9f:49:a3:18:2a:14:a1:62:d8:11: 9e:38:2b:b2:63:d8:a2:3b:8f:eb:ad:cd:ed:76:66: 9f:fa:d2:28:9b:9d:ed:7c:ff:3f:24:63:33:5a:23: da:d8:98:70:3d:27:28:05:7b:49:2d:70:88:8e:5f: 4e:a5:00:89:ba:4a:30:c4:15:4b:2c:bb:0d:03:c2: c1:2a:5a:d6:33:bd:bc:b7:24:a6:81:76:49:bd:df: 21:2e:1f:7c:64:a6:8a:d9:57:8b:83:4b:3d:8b:9d: e6:38:15:05:7f:7b:a3:4c:56:d9:68:4d:3d:c3:17: 9a:0b:38:37:86:8b:0e:58:0e:17:c1:e0:fd:69:79: 25:ad:88:1a:81:67:40:2d:31:df:72:b8:45:ed:e2: c9:b2:65:4e:e4:8b:ef:d6:37:fd:c3:0e:ca:cb:47: 0d:76:ec:c4:36:c2:5a:bc:41:f0:ec:e6:4b:0b:b8: 34:62:1f:32:68:5f:bc:74:44:6b:d8:c6:62:44:2f: a3:b6:f4:f5:96:a5:61:d9:e8:ed:ae:ca:5f:e6:46: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DD:1A:F1:20:89:A1:30:81:31:01:6F:6F:8C:C1:A8:AB:D3:FD:47 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e6:a5:4b:7d:3d:3f:88:3a:64:d4:3e:14:22:5e:80:6e:30: 3f:49:a6:0c:ce:96:5c:a1:e2:d9:cb:c6:e8:0c:00:13:fb:e7: 5f:36:80:12:71:86:ab:10:f3:0b:24:3f:b5:da:ea:68:9a:3b: de:cd:f7:6b:0e:51:a8:f2:6b:01:29:8b:78:c2:c6:4e:f3:fb: 9d:8c:b7:e2:86:fa:a0:e0:2a:36:a3:b3:29:f0:73:bc:fd:4f: e5:47:8d:fb:2c:8c:85:60:67:90:d9:e6:44:31:3b:9e:3a:6f: 5a:17:ef:e6:f1:28:09:cf:d6:b7:2b:96:ca:2f:f0:7f:6a:53: 2a:73:0e:9a:2f:86:1d:19:da:2b:6e:84:6a:71:d6:ea:9a:2b: 7a:6e:07:8d:e9:13:ff:ab:5c:57:27:33:70:86:8c:80:46:3d: e5:c6:6e:1c:83:55:ca:70:72:92:10:b8:7c:0b:3a:30:59:75: 41:3d:a3:f2:8f:97:c8:9b:3c:8c:8e:b4:a9:7c:c9:cd:a1:2f: b3:8a:fa:6e:87:d6:ed:3f:f8:86:b8:f5:98:8a:00:bb:8a:76: 8b:62:c3:38:74:d9:1c:da:fd:4d:df:9e:c1:ec:5f:ff:29:18: 25:b7:e3:59:5e:cb:bc:9f:a2:70:5c:67:5c:b8:70:cc:5f:85: 6c:56:36:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEg6lIcfCuXIvvIolzuAyWWb9zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNjAzMjUxMzU2MzBaFw0yNjAzMjkwMTQ3MzBaMDMxMTAvBgNV BAMTKDE4REQxQUYxMjA4OUExMzA4MTMxMDE2RjZGOENDMUE4QUJEM0ZENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lQbhJpzjXrgDSOZQDGrp3NBK N/2AMWkG3fG4Uqg6kM8T5KO/Oh7exCZx7lUzEk6dn0mjGCoUoWLYEZ44K7Jj2KI7 j+utze12Zp/60iibne18/z8kYzNaI9rYmHA9JygFe0ktcIiOX06lAIm6SjDEFUss uw0DwsEqWtYzvby3JKaBdkm93yEuH3xkporZV4uDSz2LneY4FQV/e6NMVtloTT3D F5oLODeGiw5YDhfB4P1peSWtiBqBZ0AtMd9yuEXt4smyZU7ki+/WN/3DDsrLRw12 7MQ2wlq8QfDs5ksLuDRiHzJoX7x0RGvYxmJEL6O29PWWpWHZ6O2uyl/mRmZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGN0a8SCJoTCBMQFvb4zBqKvT/UcwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPmpUt9PT+IOmTUPhQiXoBuMD9JpgzOllyh 4tnLxugMABP75182gBJxhqsQ8wskP7Xa6miaO97N92sOUajyawEpi3jCxk7z+52M t+KG+qDgKjajsynwc7z9T+VHjfssjIVgZ5DZ5kQxO546b1oX7+bxKAnP1rcrlsov 8H9qUypzDpovhh0Z2ituhGpx1uqaK3puB43pE/+rXFcnM3CGjIBGPeXGbhyDVcpw cpIQuHwLOjBZdUE9o/KPl8ibPIyOtKl8yc2hL7OK+m6H1u0/+Ia49ZiKALuKdoti wzh02Rza/U3fnsHsX/8pGCW341ley7yfonBcZ1y4cMxfhWxWNp8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:40 2026 by rpki-client